ESM server ( alan test) with ISA server

[smalls001]

Hi All,

 

Hope someone can help, just reinstalled the ESM server, but won't login. Username and password are correct. I think it's an ISA server configuration issue.

 

I am wanting to know what rules need to be setup for the ESM server to work. I have a rule to allow http https access from the internal ESM Server to the catglobal.com. I have run a port query for the http://www.catglobal.com 80, 443 and the results are 'not listening' on both.

 

How do I setup a rule to listening to these ports

 

Cheers

[smalls001]

It is something to do with the internal isa server, I brought a laptop home installed esm server and it worked first time.

 

Just need to know how to configure isa2004 to allow the esm server to communicate with catglobal server.

 

It's doing my head in please help!!!!

[glennda]

I just allowed all outbound access from that one machine to the internet

[smalls001]

I have tried that, all outbound to external, they said at catglobal port 80, 443 need to be listening. Did a port query both state not listening.

[glennda]

something upstream isn't blocking it?

[lordasb]

hi smalls

 

we have isa 2006 here and we have it working i will just check my rules for you and post back what we do.

 

andy

[lordasb]

just checked that machine is set on our isa against a rule called unfiltered hosts to allow all outbound traffic which is directed to the isa, e.g. traffic from esm is set to isa not the default web bloxx box. we dont have any upstream issues here as we have a clear feed to WWW.

[sister_annex]

Ours works fine on our ISA2006SP1 box - interestingly do you have ESM set to use the proxy?

 

Ours looks like the image below

 

 

I also have the Firewall client installed on that machine and the computer is in a rule that allows unrestricted access (all outbound traffic)

[smalls001]

just checked that machine is set on our isa against a rule called unfiltered hosts to allow all outbound traffic which is directed to the isa, e.g. traffic from esm is set to isa not the default web bloxx box. we dont have any upstream issues here as we have a clear feed to WWW.

 

Hi Andy,

 

So you have a access rule which allows all outbound traffic to Local host (isa). Is this from the internal ESM server?

 

what happens to the return traffic?

 

I have monitored the traffic from the ESM internal server and it opens a tcp to the esm external server, but then closes the connection straight after.

[lordasb]

our network layout is as follows

 

esm (adminpc** - windows xp sp3) (pc vlan) --- > isa2006 ( all outbound traffic) (server vlan) ---> dmz ---> cisco asa (mapping rule from isa2006 ip to external ip nat) ----> www

 

www ----> cisco asa inbound rule (smart rules so if it comes out it goes in) ---> isa (again if out allowed in rule) ----->adminpc**

 

i could get a trace from isa if that would help but would have to be tomorrow now

 

or i could pm you my number

 

andy

[smalls001]

our network layout is as follows

 

esm (adminpc** - windows xp sp3) (pc vlan) --- > isa2006 ( all outbound traffic) (server vlan) ---> dmz ---> cisco asa (mapping rule from isa2006 ip to external ip nat) ----> www

 

www ----> cisco asa inbound rule (smart rules so if it comes out it goes in) ---> isa (again if out allowed in rule) ----->adminpc**

 

i could get a trace from isa if that would help but would have to be tomorrow now

 

or i could pm you my number

 

andy

 

thanks Andy for info.

 

Got it sorted the web listener was listening on port 80 instead of port 8080.

 

dave

[lordasb]

result

[jamba1971]

thanks Andy for info.

 

Got it sorted the web listener was listening on port 80 instead of port 8080.

 

dave

 

 

Hi - having exactly the same problem here - running ISA2006, ESM works fine with direct internet connection.

How did you get it resolved in the end?